In 2009, the National Institute of Standards and Technology on behalf of the Program Manager, Information Sharing Environment (PM-ISE), Office of the Director of National Intelligence (ODNI), initiated the Access Control for SAR Systems (ACSS) project. This project focused on developing a prototype privilege management system used to express and enforce policies for controlling access to Suspicious Activity Report (SAR) data within the law enforcement domain. This work included the design, implementation and integration of distributed software components for rendering policy decisions, storing subject and resource data, and facilitating web-based retrieval of SAR records. In addition, this pilot included work to support the lifecycle of policies used by the privilege management system.